SUMMARY:

• 8+ years of Professional experience as Network Engineer in planning, designing, implementation, troubleshooting, optimizing & testing of static/dynamic routing protocols - EIGRP, OSPF, IS-IS & BGP
• Monitored Networks & Infrastructure with Cisco Prime, NetBrain, Solarwinds for Data Center operation
• Expert with Cisco 3600, 3750, 6500, 7200, 7600; Nexus 7k, 5k, 2k, ISR & ASR 9001, 1006 series devices.
• Advanced Knowledge and Expertise in IP multicast, Anycast, IP Addressing, Subnetting VLSM, Route Summarization, Route Redistribution, Spanning-tree, and OSI models.
• Experience on network topology/configuration of TCP/IP, ATM, Frame Relay, MPLS VPN in IPv4 & IPv6
• Experience in migration of Frame-relay based branches to MPLS based technology using multi-layer stackable switch like 6500 series and 2800 series router.
• Proficient with IPSEC VPN design connection & protocols, IPSEC VPN tunneling, encryption & integrity.
• Experience with F5 Big-IP, Cisco ACE, Citrix NetScaler load balancing platforms to implement policies.
• Configured network security policies IPSEC, SSL, NAT, PAT, VPN, Route-maps, distribute lists, Prefix lists, Access Control Lists (ACL), filters in Cisco ASA, Juniper SRX, Palo Alto environments.
• Deployed Layer-2 protocols VLANS (Access-maps, trunking), VTP, STP, RSTP, Ether Channels.
• Proficient in tools such as Redhat Linux, MS Office, MS Sharepoint, MS Visio and ServiceNow.
• Extensive Hands-on with products like Cisco ISE, IPAM, BlueCoat Proxy, McAfee, etc.

TECHNICALSKILLS:

Routers: Cisco 1800/2500/2600/2900/4300/4400/7200/7600 ; ASR (9001, 1006), CSR, ISR series, GSR 12000; Juniper MX480/960, PTX series

Switches: Cisco 2900/3500/3750/4000/4500/4900/6500 ; Nexus 7010, 5020, 5010, 2248 series; Juniper EX 3400/4200/4600 series; Juniper QFX 5100

Networking Protocols/Topologies : EIGRP, OSPF, BGP, RIPv2, ISIS, IGRP, CDP, SNMP, NAT, PAT, ICMP, DHCP, DNS, TCP/IP, UDP, H.323, SIP, VoIP, HDLC, PPP, VRRP, SSH, VLSM, STP, RSTP, HSRP, GLBP, VTP, FTP, HTTP, ACL, QIP, QoS, MIP, SNIP, VIP, WIP

Firewall: Cisco ASA 5585/5555/5506 X/ 5525/5510 , PIX ; Palo Alto 5020/7000/3020 ; Checkpoint R76, R77; Juniper SRX 240/300/550/650 ; Juniper SSG, ISG series;

Physical Interface (LAN) : Ethernet, Fast Ethernet, Gigabit Ethernet, Serial, SONET, DSL, OCX, T1.3

Load Balancers: Cisco ACE, F5 (Big-IP LTM, GTM), Citrix NetScaler, A10 Thunder ADC/ADS

Network Tools : Wireshark, Trace route, Packet Tracer, GNS3, Putty, NetFlow, Solarwinds Orion, Cisco Prime, Cisco CUCM/Call Manager, NetBrain, PRTG, MRTG, Nmap- Zenmap, SecureCRT, Teraterm, Filezilla FTP, Solarwinds TFTP, PortQry

OS: Cisco IOS, JUNOS, PAN-OS, NX-OS, CATOS; Windows, Linux, UNIX, Ubuntu

Tools: MS Office, MS Active Directory, MS Visio, SharePoint, SNAP, SNOW, ServiceNow, Remedy, Confluence

Scripting Languages: Ansible, Perl, Python, Powershell, Chef, Puppet, UCCX, UCCE, irules, TCL

PROFESSIONAL EXPERIENCE:

Confidential, Santa Clarita, CA

Sr. Network Engineer

Responsibilities:

• Configured OSPF, EIGRP, BGP on Cisco 2901/4431/4451 perimeter and internal routers.
• Built site-site IPsec tunnels specifying encryption and authentication using ikev1, ikev2 on Cisco ASA.
• Configured network objects, access rules, NAT, static routing, connection profiles, IPsec proposals, isakmp parameters on Cisco ASA for peer connections and used Cisco Anyconnect for ssl remote access.
• Performed extensive troubleshooting of layer 2-3 switches for VRF, Portchannels, Vlan, SVI, HSRP, GLBP.
• Worked on 3750x, 3750e, 4500, 4900 series switches for troubleshooting and new office deployments.
• Configured ACL, SSH (vty), SNMP, TACACS, DHCP, DNS on Cisco 3750/4500/4948 , Nexus 5k & 7k
• Upgraded device codes Cisco IOS, NX-OS, PAN-OS, Aironet- OS with planned roll-back procedures
• Configured IGP on Core switches in Data Center using OSPF and EIGRP and implemented route summarization and redistribution concepts.
• Performed portscan using PortQry and Nmap-zenmap, packet inspection & analysis and SPAN port monitoring using wireshark for network connectivity and intermittency issues.
• Performed wan accerelartion/optimization using Riverbed Steelhead 1555/3050, monitored top-talkers, throughput & bandwidth, TCP connections and session history. Configured in-path and peering rules.
• Configured & setup Opengear equipment in all locations as a work-around console connectivity to remote-in.
• Monitored WLC, APs, Clients in Cisco Prime using heatmaps to detect coverage holes, RF interferences, signal strength, conducted site-surveys.
• Configured Radio Interfaces 802.11 a/c and 802.11 b/g/n, Tx Power, DCA, Bandwidth, QoS, DHCP, WLAN profiles, SSID, rogue AP detection, Flex-connect, HA pairing mode for 4400/5508/8540 WLCs.
• Configured QoS, DSCP for email, VoIP, Telepresence for prioritizing traffic to avoid drops & congestion
• Added new devices in Cisco ACS and Dell Clearpass policy manager servers for AAA authentication using TACACS, 802.1x, RADIUS and associated AD login to Domain Controllers.
• Configured Interfaces, zones, security rules, NAT policies, QoS, Decryption, PBR, DHCP for multiple vsys on Palo Alto 3020/5020.
• Managed Network wide Palo FW & registered new Palos thru Panorama for pushing out standard changes
• Migrated few Juniper SRX 240, 3600 to Palo Alto 3020/5020/7000 series FW from scratch.
• Monitored network devices, interfaces, logs, CPU utilization, health, alerts and troubleshot issues, pushed/modified configs, generated change reports, run scheduled jobs, etc. using Solarwinds.
• Configured and added nodes to pools, pool members and VIPs on F5 Big IP load balancers using least connection, round robin methods. Specified services https, http to be hosted on the servers.
• Generated ssl certificates for client and server side, performed ssl offloading and SNAT on F5 Big IP LTM.
• Experience setting up Meraki Access points and MS325, stacking them and configuring switchports, vlan, access-lists, SSID, Authentication, routing, filtering using Dashboard.
• Managed Incidents, workflow, change management, schedules/rollback thru SNAP/ServiceNow.
• Created topologies, network diagrams, HLD/LLD in Visio and uploaded to Sharepoint & Confluence.

Environment: Cisco 4900/4500/6500/3750 , ISR 4431/4451/2901 ; Nexus 7010/5000/2148 ; Juniper SRX 240/3600; WLC 4400/5508/8540 ; NAT/PAT, OSPF, EIGRP, RIP, BGP, ISIS, GLBP, HSRP, STP, RSTP, SLA, TCP/IP, VoIP, MPLS, ITIL, VPN, DHCP, QoS; Palo Alto; Wireshark, Solarwinds; F5 LTM, TFTP, Cisco ASA, IPS/IDS; Cisco ISE, TACACS, RADIUS; Linux, MS Visio, Riverbed, OpenGear, Cisco Prime, Cat5e, SC/LC

Confidential, Renton, WA

Sr. Network Engineer

Responsibilities:

• Designed, Installed & configured LAN, WAN components Cisco Catalyst switches 6500, 4500, 3750 series and Cisco ASR routers 9001, 1006 according to the Network Design along with the Data Center topology.
• Provided a Flexible Access Solution for Data Center with Cisco Nexus 2148 Fabric Extender & Nexus 7010
• Managed Cisco Nexus 5k and 9300/9500 switches for the data center in Cisco Data Center Network Manager (DCNM) and timely upgrades of Cisco IOS XR, Nexus OS.
• Worked on data center Core switches for configuring Nexus 9k, Nexus 5k, 4500, 4900, 6500 series switches
• Basic Knowledge on Meraki switches MS220 & building stack and core connection to MS425 on dashboard.
• Configured OSPF, BGP protocols on Cisco ASR 9001/1006, Cisco 7200 and troubleshot them.
• Configured IPsec site-to-site VPN connection between Cisco VPN 3000  Concentrator  and Cisco 3800
• Migrated existing B2B VPN tunnels with the vendors from the 3060 VPN concentrator  to ASA Firewall . 
• Involved in designing & commissioning WAN infrastructure with OSPF for redundancy during of link failure
• Configured user roles & policies for authentication via NAC & monitored status of logged users in Cisco ISE
• Performed large scale (600+ APs) wireless deployments including device posturing & profiling in Cisco ISE
• Created and Maintained iRules, nodes, pools to direct traffic in F5 Big IP GTM and configured SSL
• Utilized SNAT in F5 LTM to define nodes and used Least Connection method for server load balancing
• Configured WIDE IP and WIDE IP pool on F5 GTM's to support load balancing between data centers.
• Performed application level redundancy by deploying F5 Big IP LTM 8950, upgrade codes on a timely basis.
• Expertise on FTP, HTTP, DNS, DHCP servers in windows server-client environment with resource allocation to desired Virtual LANs of network.
• Configured radios 802.11 a/c, 802.11 b/g/n and site-surveys, Tx power assignment, DCA on WLC 8540
• Upgraded WLC from 4400 to 5508, used HREAP to add remote APs to branch office. Extended SSIDs over different locations, created WLAN profiles for groups & integrated with Cisco ISE for authentication
• Deployed Cisco ASA new offices, configured IPsec connection profiles, ikev & isakmp paeamenters, encryption, authentication types and pre-shared key for peers.
• Added rules for security, NAT, crypto maps, ACLs, configured UNTRUST, management interfaces on ASA
• Built NAT, access rules, defined routing on logical systems/zones/vsys for access on Palo Alto 3020/5020.
• Set up policies, NAT in Juniper SRX240, 3600 FW and configuring Interfaces, logical systems, proxy-arp, NAT and monitored security session traffic flow.
• Added new devices, monitored authentication-logins, setup read-only/read-write accounts in Cisco ACS
• Configured Access rules on Palo Alto 3020 firewall for network routing for B2B network connectivity. 
• Verified & Validated the Firewall policy on Cisco ASA clusters for unused rule and consolidating rule. 
• Configured site to site VPN s & clients to site VPN tunnels through multiple Cisco VPN concentrators & Cisco ASA (5585/5525) firewalls, maintained access policies for remote users, for network security. 
• Tuned BGP internal & external peers with manipulation of attributes such as metric, origin, local preference.
• Responsible for turning up BGP peering and customer sessions, as well as debugging BGP routing problems.
• Produced reports on the bandwidth utilization, traffic analysis, traffic types, packet analysis with Cisco Prime
• Mapped Visio diagrams, topology for audits, made changes/pushed configs, check device Health and Status, Scheduled job events using NetBrain.
• Performed extensive troulshooting like asymmetric routing, packet loss, speed-duplex mismatch, latency, FW blocks, QoS using various qapps and analysis monitor in NetBrain.

Environment: Cisco 4000/6500/3750 , ASR 9001/1006; Nexus 7010/5000/2148 ; Juniper MX480/960; Juniper SRX 550/300; DMZ, NAT/PAT, OSPF, EIGRP, RIP, BGP, ISIS, GLBP, HSRP, STP, RSTP, SIP, SLA, TCP/IP, VoIP, MPLS, ITIL, VPN, DHCP, QoS; Palo Alto; Wireshark, Solarwinds; F5 LTM, HTTP, FTP, Cisco ASA, IPS; Cisco ISE, TACACS, RADIUS, Checkpoint; Linux, MS Visio, Cisco ACI, Cisco Prime, Perl, Python

Confidential, Mason, MI

Sr. Network Engineer

Responsibilities:

• Migrated from Juniper EX 3400/4200s switches to Cisco 4500/ 6500 series switches in the data center
• Deployed Cisco Nexus switches & implemented several features in Data  Center  fabric (Fabricpath & ACI)
• Upgraded Cisco 3750s upon vulnerabilities and stacked new switches connecting to core Nexus 5k.
• Configured BGP, OSPF and Static routing on Cisco 7600, 3800 routers
• Configured Cisco 4400 WLC and deployed in new location on Core switch 4500/4900 cisco models.
• Upgraded Aironet-OS on 4400, 5508 and gradually migrated all 4400 to 5508 controllers in branch offices.
• Added access-point, configured SSIDs & WLAN profiles, adjusted Tx power, DCA setting in WLC & Prime.
• Radius server setup using Cisco ISE server to support Wi-Fi security protocols.
• Implementation of BGP  to optimize WAN routing on the core and edge routers ( Cisco 7000 series )
• Configured Cisco  QOS  features like Classification, Congestion Management, Policing and Shaping. 
• Extensive experience in implementing BGP communities, filtering and BGP route maps.
• Deployed & decommissioned VLANs on Cisco ASR 9k, Nexus 9k, 7K, 5K and its downstream devices
• Worked on content routing requests, generate SSL certificates, load configurations and create DNS entries.
• Designed ACL, troubleshot IP addressing issues, Updated IOS images, Cisco IOS, racking & stacking DC.
• Implemented DMZ for Web servers, Mail servers & FTP Servers using Cisco ASA5500 Firewalls
• Authenticated IPsec encryption & granted access for users/groups to login securely in a VPN concentrator
• Setup MPLS Layer 3 VPN cloud in data center and also working with BGP WAN towards customer.
• Migrated to Cisco IPSEC client/any connect Remote access VPN solutions from Palo Alto Global Protect
• Worked on fixing various custom health monitors and templates like LDAP in F5 load balancers. 
• Worked on  F5  BIG-IP LTM 8900 , configured profiles, SNAT and ensured high availability. 
• Migrated, created, managed pools & clusters in F5 Big IP GTM 3DNS across multiple datacenters. 
• Managed F5 Big IP GTM/LTM appliances to write/manage iRules, SSL offload & created WIP , VIP s. 
• Administered Cisco ASA NGFW, creating policies, rules, users, SSL and IPsec VPN connections etc. 
• Implemented URL filtering and SSL Decryption in Palo ALto Firewall environment.
• Maintained SSL whitelisting/intercepting and configured encryption/dectyption in Bluecoat sg proxy servers.
• Update the SNMP strings for various  Routers  and Switches in SolarWinds Orion for monitoring purpose. 
• Setup & maintained Cisco ASA security policies including NAT, VPN, SSL, ACL & Secure Remote access. 
• Prepared Metrics report detailing on SLA of tickets in SNOW & process quality reports to view workflow
• Mapped, Network Diagrams and physical identification in MS  Visio  and maintained  Visio documentations
• Added devices to splunk server for monitoring, authentication failures and security/threat investigations and to Generate reports and graphs from available data depending on the issue.
• Used Splunk syslog for log monitoring, compare and search features, created jobs for monitoring events.
• Monitored network performance, packet analysis, latency & throughput issues with Cisco Prime/Solarwinds

Environment: Cisco 3500/6500, Nexus 7000/5000; Juniper M320/MX480/MX960/EX3400/4200, SRX 300/220, RIP, BGP, OSPF, EIGRP, ISIS, GLBP, HSRP, VTP, RSTP, DNS, DHCP, TACACS, RADIUS, TCP/IP, NAT/PAT, SIP, MPLS, VoIP, QoS, SLA, ITIL, IPsec, ACL; Palo Alto, SONET, IPS/IDS, PIX, Cisco ASA, Cisco ISE, Linux, Windows, MS Visio, Cisco ACS, Cisco Prime, Wireshark, Solarwinds, Perl, Python, Splunk

Confidential, Providence, RI

Network Engineer

Responsibilities:

• Configured networks using routing protocols such as RIP, EIGRP, OSPF, BGP and manipulated routing updates using route-map, distribute list and administrative distance for on-demand Infrastructure.
• Deployed Nexus 5k, 6500 Catalyst switches along Juniper Ex 3400 in the data center environment.
• Convert Branch WAN links from TDM circuits to MPLS & convert encryption from IPsec /GRE to Get VPN
• Deployed Layer 2 security in Server Farms by configuring switch for 802.1x port based authentication.
• Designed L2VPN services and VPN-IPsec authentication & encryption system for VPN concentrator.
• Rebuilding data centers and redundant sites for failover, F5 load balancers with Least Connection method.
• Configured MPLS VPN with RIP & Performed Realignment/modification of BGP from the MPLS routers.
• Created VIPs, addressing schemes, performed subneting & IP allocations, used ISIS in TCP/IP environment
• Manage a very large DNS environment using  QIP  & manual management of DNS for DMZ/External servers
• Secured DMZ & external Market Data vendors via Cisco PIX 515 & ASA 5500 series firewall rules & NAT .
• Performed redistribution of OSPF on the core Cisco ASA firewall & audited changes in Cisco ASA .
• Installed & configured 4 PIX 525 & 2 ASA 5505 in the remote access location away from the central campus.
• Gathered requirements with business partners and added new IPsec tunnels on cisco VPN  concentrator . 
• Upgraded system images on Nexus 5k and 7k multi-layer switches  using kick start and FTP server . 
• Implemented & troubleshot complex layer 2 technologies SVI, VLAN Trunks , VTP , Ether channel, STP, RSTP and MST, Created dedicated VLAN s for Voice & Data with  QoS  for prioritizing VOICE over DATA. 
• Negotiated VPN tunnels using IPsec encryption standards and also configured, implemented and managed site-to-site VPN, Remote VPN, VPN concentrators (3000/3060) .
• Upgraded Cisco IOS, JUNOS and performed racking and stacking of server room equipment.
• Manage self-service portal for tickets, change management and troubleshooting using Remedy ticketing tool.
• Monitored Network Infrastructure with Cisco Prime, NetBrain, Splunk for performance and issues.
• Implemented wireless, LAN diagrams in MS VISIO & maintained documentations in Office, MS Project.

Environment: Cisco 3500/6500, Nexus 7000/5000; Juniper EX 3400/4200, LAN/WAN, RIP, BGP, OSPF, EIGRP, ISIS, VRRP, GLBP, HSRP, VTP, RSTP, DNS, DHCP, TCP/IP, NAT/PAT, SIP, MPLS, VoIP, QoS, SLA, ITIL, IPsec, RADIUS, TACACS, ACL; Palo Alto, SONET, IPS/IDS, PIX, Cisco ASA, Cisco ISE, Linux, Windows, MS Visio, Cisco ACI, Cisco Prime, Wireshark, Solarwinds, NetBrain, Remedy, Perl, Python

Confidential, Eden Prairie, MN

Network Operations Engineer

Responsibilities:

• Configured, managed and troubleshot networks using routing protocols like BGP, RIP, EIGRP and OSPF.
• Upgraded the Data center switches from Cisco 2000/4500 to 6500 and Nexus 2k series.
• Deployed Nexus 7010, 5020, 2148, 2248 devices and worked on switch configurations, troubleshooting
• Implemented routing protocols OSPF, BGP on Cisco 2500/2800 routers, IP multicast on GSR 12000.
• Troubleshot network issues related to site - site VPN between Cisco ASA 5505 and Cisco router.
• Configured OSPF and BGP on Cisco 7000 series for communication between the  data  center  and WAN .
• Experience in manipulating various BGP attributes like Local Preference, MED, Extended Communities.
• Experience with F5 load balancers - LTM, GTM 6400, 6800, 8800 series for the corporate applications.
• Experience in IP addressing (Anycast, Multicast), configuring TCP/IP addressing scheme to IP blocks.
• Implemented Firewall rules and strategies, updated policies, NATs Performed Audits with Cisco ASA
• Configured and implemented VPN Tunnels using IPsec encryption standards.
• Expertise in creating groups and pruning traffic flow using VLAN, VTP , ISL, 802.1Q . 
• Troubleshoot Tickets on F5   LTM module and managed local & global traffic using F5 BIG IP LTM , GTM
• Configured Frame-relay and PPP encapsulation in various configurations and authentications.
• Involved in the removal of EIGRP from all devices and making OSPF the primary routing protocol.
• Troubleshoot latency and throughput issues on MPLS and Dedicated Internet Access circuits.
• Involved in Cisco IOS XR and NX OS  code up gradation in Cisco routers and devices.
• Implemented AP’s using Wireless Protocols like 802.11 (a, b, g) 802.1x, 802.11i.
• Developed  MS Visio  Documentation to give complete picture of network design for each building. 

Environment: Nexus 7010/5020/2158/2248 , GSR 12000, VRRP, HSRP, ATM, Frame relay, OSPF, RIP, BGP, EIGRP, ISIS, GLBP, HSRP, VRRP, STP, RSTP, HSRP, PPP, SIP, TCP/IP, VoIP, QoS, DNS, DHCP, VLAN, LAN/WAN, SDN, VPN Tunnels, NAT/PAT, IPS, Palo Alto, VOIP, Cisco IOS, IPsec, Radius, Tacacs, Cisco ASA, Wireshark, Linux, Windows, MS Visio, Cisco ACI, Cisco ISE, Cisco Prime, Perl, Python

Confidential

Network Support Engineer

Responsibilities:

• Worked on Cisco 7500, 7200 series routers and Catalyst switches like 2900, 3500, 3750, 4500,6500.
• Transformation of RIP V2 to OSPF, BGP routing protocols and troubleshoot them.
• Configured & tested authentication in OSPF, EIGRP, troubleshot Cisco IOS related bugs using release notes
• Involved with a Team to configure voice VLANs and implemented QoS for VOIP.
• Troubleshot complex network frame relay, ATM, PPP, ISDN, MPLS, BGP, EIGRP, OSPF & RIP issues.
• Performed configuration of LAN\WAN technologies such as Ethernet, Fast Ethernet, & Gigabit Ethernet.
• Implemented traffic engineering for MPLS network using Frame Relay and OSPF.
• Manage, Install, configure and troubleshoot Proxy, DHCP, DNS, TCP/IP, RAS, VPN & Linux servers.
• Hands on Experience in VLAN and Inter-VLAN routing, redistribution, access-lists and dynamic NAT.
• Configured Access List ACL (Std, Ext, Named) to allow users access applications, Internet & compliance
• Troubleshoot network problems using Packet Analysis tools like Ethereal (WireShark).
• Identified and resolved VLAN, VTP, STP, RSTP and IP subnet issues using Ping, Trace route.

Environment: Cisco 7500/7200, Cisco Catalyst 4500/6500; OSPF, EIGRP, RIP, BGP, ISIS, HSRP, VRRP, GLBP, FHRP, TCP/IP, VoIP, QoS, ATM, Frame relay, MPLS, Gigabit/Fast Ethernet, ACL, LAN/WAN, DNS, NAT/PAT, SIP, Ethereal, VLAN, VTP, STP, RSTP, Trace route, ARP, DHCP, VPN, Linux, MS Office, Visio

Confidential

Jr. Network Engineer

Responsibilities:

• Configured routers 2800 series, 3620, 3550 and cisco catalyst 4500, 4900 switches.
• Upgraded Cisco IOS, troubleshot complex LAN/WAN infrastructure, monitored traffic using Wireshark
• Managed and directed voice, data and video communication over 400+ internal users.
• Configured and troubleshot VOIP based phone system
• Planning and Implementation of Subnetting, VLSM to conserve IP addresses.
• Understanding of routing protocols such as OSPF, RIP, BGP, EIGRP.
• Analyzed and understood the issues related to DNS, DHCP and other IP conflicts.
• Documented design, security requirements, validation & implementation based on MS Visio, MS Office.

Environment: Cisco 2800,3620,3550, Cisco Catalyst 4500, 4900; VOIP, OSPF, RIP, EIGRP, BGP, VLSM, SIP, DNS, DHCP, Windows, MS Office, MS Visio, LAN/WAN, GLBP, HSRP, VRRP, STP, RSTP, FHRP, TCP/IP